Create VPC Flow Logs QuickSight Analysis Dashboard

Create QuickSight Dataset and Dashboard

We will now create the data sets in QuickSight from the Athena view and an analysis dashboard. All the steps from this section are required to execute one time in central account.

1. Login to your central AWS account.

2. Run CloudFormation stack to create QuickSight Athena dataset and a Dashboard.

• Download CloudFormation Template:

  CSV file format - vpc_flowlogs_quicksight_template.yaml

  OR

  Parquet file format - vpc_flowlogs_quicksight_multi_view_template.yaml

• From AWS Console navigate to CloudFormation. Then click on Create stack

• Create stack page:

  1. In Specify template section, select Upload a template file.

  2. Then Choose File and upload the appropriate template below (you have downloaded previously)

     CSV file format: vpc_flowlogs_quicksight_template.yaml

     OR

     Parquet file format: vpc_flowlogs_quicksight_multi_view_template.yaml

  3. Then Click Next

  

4. In Specify stack details page:

   1. Provide unique stack name e.g. VPCFlowLogsQuickSightStack-01

   2. QuickSightUserArn: You will need to provide ARN so that you will get permission to access the dashboard

      • Run below command in AWS Cloudshell after replcing <your account id> with central AWS account id and <your region> with region where QuickSight user is created. Copy the arn from response as shown in screenshot below.

        aws quicksight list-users --aws-account-id <your account id> --namespace default --region <your region>
        

        Example Response screenshot:

        

   3. VpcFlowLogsAthenaDatabaseName: This is required as QuickSight dataset will be created on this database

• Click Next

5. Add tags Name=VPCFlowLogs-QuickSight-Stack and Purpose=WALabVPCFlowLogs. Keep rest of the selections to default vaules. Then Click Next

6. Review the Stack parameters

7. Then, click on Create Stack

8. You will see the progress of the stack creation under Events tab as below. Please wait for the stack to complete the execution. Once complete it will show the status CREATE_COMPLETE in green against stack name, then proceed to the next step.

9. From AWS console navigate to the QuickSight and click on Dashboards link on the left panel.

10. You will see the newly created dashboard in QuickSight under Dashboards, click on the Dashboard name VPC Flow Logs Analysis Dashboard integrated with AWS VPC Service:

11. Click Share, click Share dashboard:,

12. Click on Manage dashboard access:

13. Add the required users, or share with all users, ensure you check Save as for each user, then click the x to close the window:

14. Click Save as:

15. Enter an Analysis name and click Create:

16. You will now have an analysis created from the template that you can edit and modify: